# CVEs published 2007-05-14

41 CVEs were published on May 14, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2656](https://cve.now/CVE-2007-2656.md): Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause… (no CVSS)
- [CVE-2007-2657](https://cve.now/CVE-2007-2657.md): Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID\_DataMatrix.DLL allows remote attackers to cause a… (no CVSS)
- [CVE-2007-2658](https://cve.now/CVE-2007-2658.md): Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers… (no CVSS)
- [CVE-2007-2659](https://cve.now/CVE-2007-2659.md): Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary… (no CVSS)
- [CVE-2007-2660](https://cve.now/CVE-2007-2660.md): PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG… (no CVSS)
- [CVE-2007-2661](https://cve.now/CVE-2007-2661.md): SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter… (no CVSS)
- [CVE-2007-2662](https://cve.now/CVE-2007-2662.md): SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the… (no CVSS)
- [CVE-2007-2663](https://cve.now/CVE-2007-2663.md): PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2007-2664](https://cve.now/CVE-2007-2664.md): PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2007-2665](https://cve.now/CVE-2007-2665.md): PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL… (no CVSS)
- [CVE-2007-2666](https://cve.now/CVE-2007-2666.md): Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted… (no CVSS)
- [CVE-2007-2667](https://cve.now/CVE-2007-2667.md): Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2007-2668](https://cve.now/CVE-2007-2668.md): Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the… (no CVSS)
- [CVE-2007-2669](https://cve.now/CVE-2007-2669.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-2670](https://cve.now/CVE-2007-2670.md): PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1)… (no CVSS)
- [CVE-2007-2671](https://cve.now/CVE-2007-2671.md): Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute… (no CVSS)
- [CVE-2007-2672](https://cve.now/CVE-2007-2672.md): SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus… (no CVSS)
- [CVE-2007-2673](https://cve.now/CVE-2007-2673.md): SQL injection vulnerability in includes/funcs\_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers… (no CVSS)
- [CVE-2007-2674](https://cve.now/CVE-2007-2674.md): SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2007-2675](https://cve.now/CVE-2007-2675.md): SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2007-2676](https://cve.now/CVE-2007-2676.md): PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute… (no CVSS)
- [CVE-2007-2677](https://cve.now/CVE-2007-2677.md): Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2007-0689](https://cve.now/CVE-2007-0689.md): MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action\[\] parameter to member.php, (2) imagehash\[\] parameter… (no CVSS)
- [CVE-2007-0754](https://cve.now/CVE-2007-0754.md): Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted… (no CVSS)
- [CVE-2007-1901](https://cve.now/CVE-2007-1901.md): SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by\[\] parameter to search.php, (2) p\[\] parameter to… (no CVSS)
- [CVE-2007-1902](https://cve.now/CVE-2007-1902.md): Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by… (no CVSS)
- [CVE-2007-1903](https://cve.now/CVE-2007-1903.md): Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-2444](https://cve.now/CVE-2007-2444.md): Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary… (no CVSS)
- [CVE-2007-2446](https://cve.now/CVE-2007-2446.md): Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute… (no CVSS)
- [CVE-2007-2447](https://cve.now/CVE-2007-2447.md): The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell… (no CVSS)
- [CVE-2007-2645](https://cve.now/CVE-2007-2645.md): Integer overflow in the exif\_data\_load\_data\_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers… (no CVSS)
- [CVE-2007-2646](https://cve.now/CVE-2007-2646.md): Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an… (no CVSS)
- [CVE-2007-2647](https://cve.now/CVE-2007-2647.md): Static code injection vulnerability in admin/admin\_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject… (no CVSS)
- [CVE-2007-2648](https://cve.now/CVE-2007-2648.md): Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute… (no CVSS)
- [CVE-2007-2649](https://cve.now/CVE-2007-2649.md): Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows… (no CVSS)
- [CVE-2007-2650](https://cve.now/CVE-2007-2650.md): The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file… (no CVSS)
- [CVE-2007-2651](https://cve.now/CVE-2007-2651.md): Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or… (no CVSS)
- [CVE-2007-2652](https://cve.now/CVE-2007-2652.md): Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors… (no CVSS)
- [CVE-2007-2654](https://cve.now/CVE-2007-2654.md): xfs\_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary… (no CVSS)
- [CVE-2007-2655](https://cve.now/CVE-2007-2655.md): Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a… (no CVSS)
- [CVE-2006-7203](https://cve.now/CVE-2006-7203.md): The compat\_sys\_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.